A Plugin Deactivated Itself: Find Out Why, Get Alerted
A plugin deactivated itself and nothing is in the logs? Five causes, the check for each, and two small scripts that alert you the next time it happens.
Debugging & Profiling11 min read
Tag: Plugin Security
File-Upload Flaw in a Plugin: How to Check and Clean
Patching a file upload vulnerability does not remove what was uploaded. Version, uploads and log checks for Bricksforge CVE-2026-85097 and Gravity Forms.
Security9 min read
Your Host's Firewall Is Not the Patch: How to Test What Your Hosting Really Protects
A firewall filters requests that look like a known attack; an update removes the bug. Real WordPress releases where the bug needed a login, which layer filters what, how to test your own protection on staging, and a one-page response plan.
Security12 min read
The Backdoor Came Through the Plugin Repo, Not Around It
A hardcoded backdoor reached version 10.8.7 of a 20,000-install WordPress plugin via a compromised developer account. It was caught in under two hours and never distributed. What it did, why the detection matters more than the damage, and what it says about trusting the repo.
Security9 min read
AI Is Writing Your Plugins Now: The New WordPress Supply-Chain Risk
AI now writes a growing share of the plugins and themes on live WordPress sites, faster than anyone can review. That is a new supply-chain risk: not malicious code, but under-reviewed AI code carrying a higher defect rate into plugins you trust. How to defend your site.
Security9 min read
